Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
File: QCc8FepF3zcZPjRbae3YP4xvIgI.mft (raw, json)
Hash identifier: bnpkSHQfvwR3HDAPF5U+eBzdRiNbsfGlLGdvpFQkac0=
Subject key identifier: EC:C8:4A:7D:83:73:70:2C:79:2D:AC:56:CD:D6:14:99:26:ED:77:74
Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202
Certificate serial: 019748FA9BF43D1B67B640D705893C2135AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
Manifest number: C2
Signing time: Sat 07 Jun 2025 06:01:12 +0000
Manifest this update: Sat 07 Jun 2025 06:01:12 +0000
Manifest next update: Sun 08 Jun 2025 06:01:12 +0000
Files and hashes: 1: QCc8FepF3zcZPjRbae3YP4xvIgI.crl (hash: HRLTV94oHeCuFVHdfhZHhoLCJhSBa6lKHLKhAhRpQAI=)
2: rg92faZanaYES8NBj5pg8WmI5nI.roa (hash: 8R4hL47sFCLdHAmoIZE8IPnGm4ZN8Yi2FpnpcDwoEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:9b:f4:3d:1b:67:b6:40:d7:05:89:3c:21:35:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202
Validity
Not Before: Jun 7 06:01:12 2025 GMT
Not After : Jun 8 06:01:12 2025 GMT
Subject: CN=ecc84a7d8373702c792dac56cdd6149926ed7774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:d2:76:18:2d:97:4b:74:ed:2e:57:a2:e6:
e3:8f:5e:3c:b4:cc:d2:f0:85:49:cf:fb:1c:f7:0d:
11:42:b8:b7:a6:a7:e1:cb:65:ae:46:76:ac:d6:5b:
21:27:63:cf:76:a4:d2:68:ef:89:41:f9:84:92:5f:
cd:93:1e:6c:49:6f:e0:bd:13:5a:89:e6:56:18:67:
a7:17:70:9f:c3:ea:12:11:fd:85:a9:d3:ce:fe:86:
8a:90:95:00:6f:ec:c3:23:1b:16:4c:77:e5:9e:13:
47:95:d6:af:2f:98:18:3f:a8:7c:63:b7:d3:4a:43:
4e:38:af:c6:42:e5:0e:a9:a2:a0:fd:e0:b4:92:35:
06:8b:ee:30:42:69:b6:b3:dc:14:0b:23:00:f0:7a:
c7:88:9a:23:42:aa:ce:3a:f7:d1:92:13:49:41:91:
57:2f:ad:72:e4:4e:ff:b4:a3:9c:b9:d4:4c:ed:e6:
a3:43:ab:7c:5a:c2:6a:91:66:b5:3c:dd:15:36:35:
1f:2e:ce:26:a8:b8:8e:fc:57:87:0a:a5:47:7c:7b:
57:59:7b:f0:3f:ac:d1:0c:74:95:59:a4:f2:10:40:
2c:17:f7:d9:e1:8b:27:49:5f:93:96:40:13:b3:e1:
57:13:a3:3b:5e:e6:12:e1:13:6f:00:ad:e8:fd:0b:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C8:4A:7D:83:73:70:2C:79:2D:AC:56:CD:D6:14:99:26:ED:77:74
X509v3 Authority Key Identifier:
keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f7:92:b8:cc:60:fe:5e:5a:4e:e8:a7:e2:0d:45:44:e9:b1:
65:37:4c:39:eb:59:e9:a7:98:5d:d4:75:47:0a:30:4c:60:d2:
37:2d:6d:cf:fb:20:f7:71:ab:f5:4a:4c:c7:88:38:6d:25:6e:
1b:37:da:5a:3d:2f:f4:06:90:13:5d:e2:af:86:e5:4d:32:f9:
bc:d0:38:2b:9a:02:d3:f0:1a:18:b9:12:6b:36:2b:05:97:07:
db:d9:98:f3:d0:43:69:6c:69:c3:2b:25:08:19:9d:9c:f2:6a:
cf:1c:c3:78:6b:88:af:e5:f9:da:36:05:f2:b2:ce:ce:2e:d1:
85:d5:73:30:f7:d6:21:ab:f6:18:c9:10:8f:5c:59:44:c7:9d:
bb:f8:2f:7d:99:4d:fc:d9:24:3a:cb:f3:89:d1:bb:f7:f8:8c:
b9:41:f1:b6:5f:04:a0:4e:01:c2:f3:86:7b:4e:66:68:cb:ba:
46:39:f9:3a:06:4a:ea:f2:af:da:c1:2d:5d:a4:3f:63:4d:b9:
71:0f:fb:ca:0e:fe:b3:af:9f:15:04:20:d1:7c:44:6a:5a:2d:
75:dc:c9:1e:22:c0:91:c7:e0:8d:99:4e:0f:79:21:48:8a:61:
ed:2e:cb:7e:30:cc:ea:76:e3:31:91:6e:b7:17:84:f5:3a:69:
68:6b:24:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:33:42 2025 by rpki-client